Robert - Architecte ETHERNET

Challenge Business Analyst IAM-PAM

Achievement Non-Disclosure clauses
Identity & Access Management / Privileged Access Management
1. Increasing the ERGO & DKV Cyber Security Maturity up to the level expected by Management Committee;
2. Cyber Security Maturity Levels to be reached are key part of the functional requirements;
3. Complying with Group and local (ERGO & DKV) ISMS policies and Belgian laws and regulations (GDPR, …);
4. Enable ERGO & DKV data to be protected and processed more securely;
5. Improving control on Identities and their Access Rights;
6. Consolidated view on Access Rights of all users allowed to access and process ERGO & DKV data (employees, business partners, customers and privileged users);
7. Enforcing key processes & principles (Joiner, Mover & Leaver processes, Recertification processes; Least privilege & need to know principles, Segregation Of Duties);
8. Access rights granted and revoked automatically and reviewed regularly;
9. Providing evidences, the processes are running efficiently;
10. KPI’s and KRI’s will be provided (alignment with project Cyber Risk Metrics and Reporting);
11. Enabling closing of IAM & PAM related Audit findings;
Bringing added value for the Business:
12. Adding visibility on users access rigths;
13. Simplifying and securing users access rights management;
14. Logging & Monitoring of users access rights management activities;
15. Logging & Monitoring of privileged users activities;
16. Providing evidences;
17. Automating joiner, mover and leaver processes;
18. Automating (re)certification processes;
19. Opportunity to improve end users experience:
20. Request & approval;
21. Single Sign On;
22. Self services (registration, password reset, …).

GSK (BE)
Challenge Risks Assessment Coordinator
Achievement Non-Disclosure clauses
Several Risks Assessment on critical platform / applications (SOX / Confidentiality and Sensitive Information).
Cyber Security Training

Challenge RFP SIEM-SOC

Achievements Project Manager SIEM-SOC (included CAPEX-OPEX)
Cloud Azure
23. Vulnerabilities assessment (Using EBIOS)
24. Security configuration enhancement
Agile
RFP blue-print acceptation by concerned people.
RFP redaction.
Supplier’s NDA signature
Q&A supplier’s consolidation
Supplier’s answers scoring
Supplier’s solution oral presentation
Supplier’s solution oral presentation scoring
Supplier’s short list involved to P.O. Cs
POC’s scoring
Supplier commitment to phasing implementation.
25. QUA + Tests
26. PRD + Tests
27. Roll-out

Challenge SIEM - SOC (Security Operation Center) Management Responsible
Achievements Vulnerabilities Management (Non-Disclosure clauses)
D.L.P (Data Leakage Protection / Data Loss Prevention)
CyberArk
28. PAM (Privilege Access Management)
29. PSM (Privilege Session Manager)
30. PAS (Privilege Access Security)
31. PVWA ( Password Vault Web Access)
32. EPV (Enterprise Password Vault)
33. Training-Awareness
Methodology Scrum-Agile
Using Qualys
34. Vulnerabilities scanning
35. Policy Compliance (CIS) scanning
36. Risks acceptance / mitigation process (based on CVSS rating / Risk appetite)
37. Asset discovery
ITSM Omnitracker
Hardening (operating system / data base / security nodes)
Vulnerabilities Reporting (weekly / Monthly / ad-hoc)
Metrics

38. Dashboard
39. KPIs
Firewall logs analysis
Mobile device (smartphone, tablet) management using XEN
AV solution log analysis (workstations / servers)
OMADA (IAM)
40. Business
1. Business role model
2. Entitlement Model
3. Business Role Model enforcement
4. Business Modeling Proof Of Concept
5. RACI Grid
41. Operational
1. Grid (SOLL-IST) periodic control
2. Role / Profile creation / deletion / approval
3. SAP access review
4. Segregation Of Duty
5. IAM SPOC (Life cycle, update, issues…etc.)
6. Daily check sync failure (ITSM, AD, HR…)
SCADA Environment
42. AV solution decommissioning / commissioning
P.K.I (Private Keys Infrastructure Management)
43. Certificates Management
44. Central Directory / Keys storing
45. LCM (life cycle management )
Cloud AZURE
46. Exchange and Office 365 risks assessment
47. Daily check issue (Office 365, Exchange)
48. End-users Azure Training
NIS / ENISA
CSC (Critical Security Controls) implementation objective.
Security awareness to end-user (phishing, ransomware, malware..etc.)
Threats management: IoC (Indicator of Compromise), ATP (Advanced Persistent Threat) etc.
DRP
49. DRP plan peer reviewer
Daily and projects tasks: daily tasks managed security alerts, and in some cases where news projects kick-off.
Incident Response tasks :
50. Fortinet sandbox events (FSA) – False Positive assesssment.
51. AV solutions events.
52. EndUsers incidents (management within an SLA’s management for VIP).
53. IoC (indicators of compromise).This risk was treated as soon as a CERT communicated it to me.
54. S.O.D (segregation of duties) alert from RBAC.
55. IAM sync failure
56. SCCM upgrade
57. Failure Mobile incident
58. ..etc.
ITSM (IT Service Management)
59. Process / procedure creation / enhancement package implementation
Cloud Azure
60. Vulnerabilities assessment
61. Security configuration enhancement
Projects security alert tasks
62. Patching failure management ( For unknown reasons SCCM patching failed)
63. Ransomwares / malware alerts
64. Meltdown and Spectre Intel buffer vulnerabilities
65. Vulnerabilities (findings) with Qualys scan
66. Partner Exchange with web certificate low ratings…request to obtain a A rating.
67. Weak protocol (SSL 1 or 2, FTP, SNMP v1 or 2, SSH 1…etc. )End of life
68. ..etc.

Mission to ING (BE)
Challenge ISRM / Audit
Achievements OSG’s Control
Analyse critical OSGs
Addendum template
Collect relevant information
IAM grid (SOLL-IST) user access
Monitoring (TSCM / SEM) audit
SoX controls audit

Mission to Puilaetco
Challenge ISRM / Security Officer
Achievements BIA / DRP / Access Control / Risks Analysis
BIAs update
DRP
69. Prepare test
70. Post-mortem actions
SoX section 404
MiFID 2
Users Access Control
60. Applications
61. Remote connection
Applications RA

Challenge Cyber Defence Project (answer a tender / Non-disclosure agreement)
Achievements Risks Assessments / Governance / Solution Architect
Alignment with EU Council Decisions
NOC / SOC / SIEM /APT
SSRS / SECOPS / SOP redaction

Mission
Challenge PM / Risk Assessor
Achievements Several IT projects
Solution Architect : Industrial Firewall Implementation
Infrastructure design : DMS project

Mission
Challenge Risk Assessor
Achievements Several IT projects
Enhance Security in SCADA Environment

Mission
Challenge Risk Assessor
Achievements Several IT projects
PKI Infrastructure
Wi-Fi Secure guest access
Mobility (smartphone)
Confidentiality compliance